Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/il7pRMdKLEYoDd9VVOLCs8juH5I.roa
File: il7pRMdKLEYoDd9VVOLCs8juH5I.roa (raw, json)
Hash identifier: cLG6qbpX4nXXalhD77aeNaVy6x9P7Fo3QtEoziKod28=
Subject key identifier: 8A:5E:E9:44:C7:4A:2C:46:28:0D:DF:55:54:E2:C2:B3:C8:EE:1F:92
Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial: 018CC50060799DC5652E9970948DD51F42D7
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/il7pRMdKLEYoDd9VVOLCs8juH5I.roa
Signing time: Mon 01 Jan 2024 12:29:45 +0000
ROA not before: Mon 01 Jan 2024 12:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44090
IP address blocks: 185.129.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:60:79:9d:c5:65:2e:99:70:94:8d:d5:1f:42:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Validity
Not Before: Jan 1 12:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a5ee944c74a2c46280ddf5554e2c2b3c8ee1f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:0b:12:6b:7a:6a:9b:02:d1:c2:61:13:04:
3c:c0:57:01:97:be:8d:4e:72:b5:83:e4:bd:96:52:
04:56:79:2f:c3:15:d2:63:99:ba:22:4e:f0:07:27:
4b:b2:4a:ca:24:c6:61:b7:4a:0e:3a:e9:29:3b:df:
af:41:e9:7d:17:72:57:02:d7:22:86:7f:4e:a1:a1:
5c:04:8d:4a:39:c4:36:5a:75:63:a7:02:57:61:78:
03:d1:14:14:83:04:ad:9e:32:6e:29:f3:df:6b:ae:
ee:79:ef:bf:d6:8f:27:0b:7d:ed:a0:8e:fc:1b:b6:
db:e5:c1:df:80:5f:f0:e9:63:ac:20:f4:b9:4d:13:
c5:5b:fc:8a:a2:24:75:bf:ec:f5:08:1b:70:c3:ef:
51:7d:04:39:3b:2f:8d:18:a6:c4:6d:93:b0:2a:66:
a5:cd:5d:e4:56:13:d0:cf:ca:c7:16:32:0f:10:cc:
e0:78:14:37:1d:b7:c4:c0:e5:1d:97:24:b4:17:db:
de:b4:f8:74:b5:07:af:92:87:7b:7c:fc:c0:7b:84:
a7:53:ab:c9:4b:41:25:52:49:ae:6c:83:9d:53:ff:
c9:f6:a0:53:3e:1f:55:f1:4e:4b:80:f0:5f:af:63:
d7:e3:c7:c0:be:aa:1e:6f:46:6f:f0:bc:2d:e4:d8:
b7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5E:E9:44:C7:4A:2C:46:28:0D:DF:55:54:E2:C2:B3:C8:EE:1F:92
X509v3 Authority Key Identifier:
keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/il7pRMdKLEYoDd9VVOLCs8juH5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.232.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:e7:3a:2b:2a:0e:2d:7e:3b:5a:2d:e7:07:98:b0:f0:86:a1:
5c:88:2c:7f:20:6d:2d:21:92:65:8f:12:b0:af:1d:fb:5d:47:
7c:41:f6:b1:0b:4d:72:43:48:e9:57:e4:0e:cf:d3:4d:6d:f1:
cb:54:8c:2f:4a:80:30:b5:9a:f5:0d:b1:65:cc:31:33:f0:45:
7c:b4:a4:7d:a7:ee:ac:07:80:2f:37:4f:fc:6a:24:93:3b:d1:
51:7a:39:12:fa:43:21:ce:a1:34:48:b8:b0:cc:62:b9:c5:d3:
0e:01:03:48:8d:fc:04:a5:f4:76:03:d5:4f:5e:ab:dc:12:65:
c3:e3:1a:05:74:de:1d:fe:d9:5c:4f:d7:58:42:33:c9:14:df:
d8:b7:f4:f6:14:af:7c:a7:d4:7a:bb:de:34:29:32:e9:dd:af:
73:5a:fb:0d:93:f5:4e:3f:49:c2:8a:9c:c8:ac:88:d9:f8:45:
84:b1:61:71:1a:f4:01:3b:2b:88:2b:f8:a0:9c:55:73:1e:56:
09:b8:8b:83:98:42:77:1c:e5:5f:f5:67:a8:9d:0f:73:4f:c5:
47:0f:e7:a4:84:e4:6e:71:e0:70:a4:56:03:80:fe:67:c1:1c:
cf:6c:7f:2d:4f:d8:d3:47:fa:90:99:ec:b5:7d:3e:34:cb:0b:
37:e3:db:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAGB5ncVlLplwlI3VH0LXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiYmQ1MTI3MjA2NGI2M2IyYzY2M2MwMjk2YmExMWRiNWVh
MjM4YzAwHhcNMjQwMTAxMTIyOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTVlZTk0NGM3NGEyYzQ2MjgwZGRmNTU1NGUyYzJiM2M4ZWUxZjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzELEmt6apsC0cJhEwQ8wFcBl76N
TnK1g+S9llIEVnkvwxXSY5m6Ik7wBydLskrKJMZht0oOOukpO9+vQel9F3JXAtci
hn9OoaFcBI1KOcQ2WnVjpwJXYXgD0RQUgwStnjJuKfPfa67uee+/1o8nC33toI78
G7bb5cHfgF/w6WOsIPS5TRPFW/yKoiR1v+z1CBtww+9RfQQ5Oy+NGKbEbZOwKmal
zV3kVhPQz8rHFjIPEMzgeBQ3HbfEwOUdlyS0F9vetPh0tQevkod7fPzAe4SnU6vJ
S0ElUkmubIOdU//J9qBTPh9V8U5LgPBfr2PX48fAvqoeb0Zv8Lwt5Ni3VQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIpe6UTHSixGKA3fVVTiwrPI7h+SMB8GA1UdIwQY
MBaAFHu9UScgZLY7LGY8Apa6EdteojjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUt
OTdjOWFhYjgyOGYyLzEvaWw3cFJNZEtMRVlvRGQ5VlZPTENzOGp1SDVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUtOTdjOWFhYjgyOGYy
LzEvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDuYHoMA0G
CSqGSIb3DQEBCwUAA4IBAQBc5zorKg4tfjtaLecHmLDwhqFciCx/IG0tIZJljxKw
rx37XUd8QfaxC01yQ0jpV+QOz9NNbfHLVIwvSoAwtZr1DbFlzDEz8EV8tKR9p+6s
B4AvN0/8aiSTO9FRejkS+kMhzqE0SLiwzGK5xdMOAQNIjfwEpfR2A9VPXqvcEmXD
4xoFdN4d/tlcT9dYQjPJFN/Yt/T2FK98p9R6u940KTLp3a9zWvsNk/VOP0nCipzI
rIjZ+EWEsWFxGvQBOyuIK/ignFVzHlYJuIuDmEJ3HOVf9WeonQ9zT8VHD+ekhORu
ceBwpFYDgP5nwRzPbH8tT9jTR/qQmey1fT40yws349vP
-----END CERTIFICATE-----
Generated at Wed Jun 26 17:56:58 2024 by rpki-client on console-ams.rpki-client.org